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DETAILED ACTION 

Continued Examination Under 37 CFR LI 14 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 1 1/20/07 has been entered. 

2. This communication is responsive to Amendment, filed 1 1/28/07. 

Claims 1-3, 5, 6, 8, 10-38, 40, 41, 43, and 45-73 are pending in this application. In the 
Amendment, claims 4, 39 were cancelled, claims 71-73 were added, and claims 1, 16, 36, 51 
were amended. This action is made non-Final. 

Information Disclosure Statement 

3. Applicants' Information Disclosure Statements, filed 1 1/30/2007, 12/28/2007, have been 
received, entered into the record, and considered. See attached form PTO-1449. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
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having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

This application currently names joint inventors. In considering patentability of the claims 
under 35 U.S.C. 103(a), the examiner presumes that the subject matter of the various claims 
was commonly owned at the time any inventions covered therein were made absent any 
evidence to the contrary. Applicant is advised of the obligation under 37 CFR 1.56 to point 
out the inventor and invention dates of each claim that was not commonly owned at the time 
a later invention was made in order for the examiner to consider the applicability of 35 
U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 

5. Claims 1, 2, 3, 5, 6, 8, 10-22, 25-33, 36, 37, 38, 40, 41, 43, 45-57, 60-68, 71, 73 are 
rejected under 35 U.S.C. 103(a) as being unpatentable over Gregg et al. (US Patent No. 
6,516,416), in view of Olden (US Patent No. 6,460,141). 

As to claims 1, 36, Gregg teaches a method for provisioning databases for users on a 
network, the method comprising the steps of: 

a first party (i.e. ISA Clear ingHouse, See Figs. 1, 2, col. 4, lines 6-62) managing one or 
more database system (i.e. clearinghouse database, col 4, lines 34-62); 

a plurality of second parties (i.e. Web Server, 34, See Fig. 1, col 4, lines 6-62) 
subscribing to database services (i. e. a usage server which collects usage data from the 
subscription access servers 34 and updates the clearinghouse database, col 4, lines 34-62) 
supported by the one or more database system managed by the first party, wherein the database 
services include services for storing (i.e. The server 34 sends usage data to the clearinghouse 30 
at the end of every subscriber's session and includes added functionality for enforcing content 
protection and processing online applications for subscriptions, as well as online activation of 
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subscriptions, col. 5, lines 7-31) and managing data (i.e. the clearinghouse database, col. 4, lines 
34-62) provided by the second parties (i.e. The clearinghouse consists of a structured query 
language (SQL) database which hosts the clearinghouse database as well as a user 
authentication server which authenticates subscribers on behalf of the subscription access 
servers and processes online applications. It also includes a usage server which collects usage 
data from the subscription access servers 34 and updates the clearinghouse database with it, and 
also includes a URL tracking server which collects URL tracking data from subscription access 
servers 34 to update the database. The clearinghouse also includes administration software 32 
which provides a graphical user interface to administer the clearinghouse database, col 4 } lines 
34-62); and 

providing, over the network, to database applications (i.e. ISA server software, ISA site 
administration software, See Web Server 34 in Fig, I) owned and controlled by the second 
parties and maintained by the first parties (i.e. multiple subscription access servers being 
controlled by a single clearinghouse 30, col 4, lines 6-33) access to the database services to 
which the second parties are subscribed (i.e. a single subscription access server 34 and a single 
clearinghouse server 30, the subscription access system of the present invention is adapted to be 
used in other configurations, which may include multiple subscription access servers being 
controlled by a single clearinghouse 30 or multiple subscription access servers which interact 
with multiple clearinghouses 30. Such flexibility in configurations is an extremely desirable 
aspect of the present invention, col 4, lines 6-33), 

wherein the database applications, owned and controlled by the second parties and 
maintained by the first parties, interact with the database systems managed by the first party by 
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sending, from the second parties, to the database system, over the network, database commands 
that conform to the database language (i.e. formulates SQL queries that will update all that data 
into the subscription access clearinghouse database 56. The usage daemon 60 will then send 
back a message confirmation (MC) back to the session manager 52 which indicates the status of 
the database update, col 10, lines 28-46) supported by the database system (i.e. a single 
subscription access server 34 and a single clearinghouse server 30, the subscription access 
system of the present invention is adapted to be used in other configurations, which may include 
multiple subscription access servers being controlled by a single clearinghouse 30 or multiple 
subscription access servers which interact with multiple clearinghouses 30. Such flexibility in 
configurations is an extremely desirable aspect of the present invention, col 4, lines 6-33)\ 

delivering over the network, to a user associated with one of said second parties (i.e. The 
subscriber 36 inputs the login parameters which the subscription access server 34 then forwards 
to the clearinghouse 30. If the parameters are valid, a response is provided by the clearinghouse 
30 to the subscription access server 34 which then communicates the protected content to the 
subscriber 36. The session usage data is eventually forwarded for storage by the clearinghouse 
30, col 6, lines 1 7-33), one or more messages which cause generation of user interfaces that 
allow the user to access a database for a database service to which said one of said second parties 
has subscribed (i.e. For every user authentication request, the user authentication daemon first 
insures it is communicating with an authentic subscription access server 34, and then it queries 
the clearinghouse database server 56 to find the user's subscription information, col. 6, line 64 
to col 7, line 28); 
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the second parties defining one or more database objects (i.e. a shared object, col. 5, lines 
7-31) comprising web site database components (i.e. The subscription access server 34 consists 
of a shared object which is incorporated as a part of the web server so that the server can 
protect contents as will be discussed, col. 5, lines 7-31); and 

the database objects generating and inserting code (i.e. Plug-in Traps the windows 
message for user command, Step 44, See Fig. 27) which is sent to the user's browser for 
presentation as a web page (i.e. All of these features are controlled by the subscription access 
server 34 which sends specific commands to the subscriber software 36 to perform the tasks as 
needed. The subscriber software 36 is preferably available as a plug in for the Netscape 
Navigator Version 3.0 or above or as an ActiveX component for Microsoft Internet Explorer 
(Version 3. 1 or above), col. 5, lines 32-54; The server 34 also includes a site administration 
software program that provides a web based visual interface to administer the session manager 
and maintain subscription profiles, col. 5, lines 7-31). 

Gregg does not teach: 

the steps of defining one or more database objects and generating and inserting code are 
performed by a web site building wizard. 

Olden the steps of defining one or more database objects and generating and inserting 
code are performed by a web site building wizard (i.e. In order to create a Web server, the 
Create button on the Web Servers page shown in FIG. 20 is clicked. This brings up the Create 
Web Server dialog window, as shown in FIG. 21. Various information is specified. The unique 
Web server Name is specified. This is the name that the security and access management system 
10 uses when looking for the Web server over the computer network. The Hostname or host IP 
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address of the Web server is also specified. The Port number on which the Web server runs is 
also specified. The Manufacturer of the Web server software is additionally specified. This is a 
drop down list. Finally, a short Description of the Web server is preferably specified, col. 19, 
lines 54-65). 

It would have been obvious to one of ordinary skill of the art having the teaching of 
Gregg and Olden at the time the invention was made to modify the system of Gregg to include 
the limitations as taught by Olden. One of ordinary skill in the art would be motivated to make 
this combination in order to allow Web applications to be defined to span multiple Web servers 
in view of Olden (col. 19, lines 43-53), as doing so would give the added benefit of providing a 
security and access management system for Web-enabled and non- Web-enabled applications and 
content on a computer network as taught by Olden (Summary). 

As per claim 71, Gregg teaches a method comprising: 

an internet database service provider (IDSP) managing one or more database system (i.e. 
ISA Clear ingHouse, See Figs. 1, 2, col 4, lines 6-62); 

a plurality of intermediate providers (i.e. Web Server, 34, See Fig. 1, col. 4, lines 6-62) 
subscribing to database services (i. e. a usage server which collects usage data from the 
subscription access servers 34 and updates the clearinghouse database, col. 4, lines 34-62) 
supported by the one or more database system managed by the IDSP, wherein the database 
services include services for storing (i.e. The server 34 sends usage data to the clearinghouse 30 
at the end of every subscriber's session and includes added functionality for enforcing content 
protection and processing online applications for subscriptions, as well as online activation of 
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subscriptions, col 5, lines 7-31) and managing data (i.e. the clearinghouse database, col 4, lines 
34-62) provided by the intermediate providers (i.e. The clearinghouse consists of a structured 
query language (SQL) database which hosts the clearinghouse database as well as a user 
authentication server which authenticates subscribers on behalf of the subscription access 
servers and processes online applications. It also includes a usage server which collects usage 
data from the subscription access servers 34 and updates the clearinghouse database with it, and 
also includes a URL tracking server which collects URL tracking data from subscription access 
servers 34 to update the database. The clearinghouse also includes administration software 32 
which provides a graphical user interface to administer the clearinghouse database, col 4, lines 
34-62); and 

providing, over the network, to database application (i.e. a single subscription access 
server 34 and a single clearinghouse server 30, the subscription access system of the present 
invention is adapted to be used in other configurations, which may include multiple subscription 
access servers being controlled by a single clearinghouse 30 or multiple subscription access 
servers which interact with multiple clearinghouses 30. Such flexibility in configurations is an 
extremely desirable aspect of the present invention, col 4, lines 6-33) owned and controlled by 
the intermediate providers and maintained by the IDPS (i.e. multiple subscription access servers 
being controlled by a single clearinghouse 30, col 4, lines 6-33), access to the database services 
to which the second parties are subscribed (i.e. a single subscription access server 34 and a 
single clearinghouse server 30, the subscription access system of the present invention is 
adapted to be used in other configurations, which may include multiple subscription access 
servers being controlled by a single clearinghouse 30 or multiple subscription access servers 
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which interact with multiple clearinghouses 30. Such flexibility in configurations is an extremely 
desirable aspect of the present invention, col 4, lines 6-33), 

wherein the database applications, owned and controlled by the intermediate providers 
and maintained by the IDSP, interact with the database systems managed by the IDSP by 
sending, from the intermediate providers, to the database systems, over the network, database 
commands that conform to the database language (i.e. formulates SQL queries that will update 
all that data into the subscription access clearinghouse database 56. The usage daemon 60 will 
then send back a message confirmation (MC) back to the session manager 52 which indicates the 
status of the database update, col. 10, lines 28-46) supported by the dataset system (i.e. a single 
subscription access server 34 and a single clearinghouse server 30, the subscription access 
system of the present invention is adapted to be used in other configurations, which may include 
multiple subscription access servers being controlled by a single clearinghouse 30 or multiple 
subscription access servers which interact with multiple clearinghouses 30. Such flexibility in 
configurations is an extremely desirable aspect of the present invention, col 4, lines 6-33); 

delivering over the network, to a user associated with one of said intermediate providers 
(i.e. For every user authentication request, the user authentication daemon first insures it is 
communicating with an authentic subscription access server 34, and then it queries the 
clearinghouse database server 56 to find the user's subscription information, col 6, line 64 to 
col. 7, line 28), one or more messages which cause generation of user interfaces that allow the 
user to access a database for a database service to which said one of said intermediate providers 
has subscribed (i.e. For every user authentication request, the user authentication daemon first 
insures it is communicating with an authentic subscription access server 34, and then it queries 
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the clearinghouse database server 56 to find the user's subscription information, col 6, line 64 
to col 7, line 28); 

the intermediate providers defining one or more database objects (i.e. a shared object, 
col. 5, lines 7-31) comprising web site database components (Le. The subscription access server 
34 consists of a shared object which is incorporated as a part of the web server so that the server 
can protect contents as will be discussed, col 5, lines 7-31); 

the database objects generating and inserting code (i.e. Plug-in Traps the windows 
message for user command, Step 44, See Fig. 27) which is sent to a user's browser for 
presentation as a web page (i.e. All of these features are controlled by the subscription access 
server 34 which sends specific commands to the subscriber software 36 to perform the tasks as 
needed. The subscriber software 36 is preferably available as a plug in for the Netscape 
Navigator Version 3.0 or above or as an ActiveX component for Microsoft Internet Explorer 
(Version 3. 1 or above), col 5, lines 32-54; The server 34 also includes a site administration 
software program that provides a web based visual interface to administer the session manager 
and maintain subscription profiles, col 5, lines 7-31). 

Gregg does not teach: 

the steps of defining one or more database objects and generating and inserting code are 
performed by a web site building wizard. 

Olden the steps of defining one or more database objects and generating and inserting 
code are performed by a web site building wizard (i.e. In order to create a Web server, the 
Create button on the Web Servers page shown in FIG. 20 is clicked. This brings up the Create 
Web Server dialog window, as shown in FIG. 21. Various information is specified. The unique 
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Web server Name is specified This is the name that the security and access management system 
10 uses when looking for the Web server over the computer network. The Hostname or host IP 
address of the Web server is also specified. The Port number on which the Web server runs is 
also specified. The Manufacturer of the Web server software is additionally specified. This is a 
drop down list. Finally, a short Description of the Web server is preferably specified, col. 19, 
lines 54-65). 

It would have been obvious to one of ordinary skill of the art having the teaching of 
Gregg and Olden at the time the invention was made to modify the system of Gregg to include 
the limitations as taught by Olden. One of ordinary skill in the art would be motivated to make 
this combination in order to allow Web applications to be defined to span multiple Web servers 
in view of Olden (col. 19, lines 43-53), as doing so would give the added benefit of providing a 
security and access management system for Web-enabled and non- Web-enabled applications and 
content on a computer network as taught by Olden (Summary). 

As to claims 2, 37, Olden teaches: 

at least one of said second parties in an application service provider that provides 
application services to a plurality of third parties over said network (i.e. ISA subscriber 36, Fig. 
D\ 

the step of providing access to the database services includes providing database services 
to an application used by said application provider to provide said application services to said 
third parties (i.e. Referring to FIG. 16, in order to create a new application, the Create button is 
clicked. This brings up the Create Application dialog window. The administrator can then 
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specify the following application properties. One application property is the Name of the 
application. Another property is a short Description of the Web application, A final property is a 
Type for the application, which is generally set to WEB, unless the installation of the security 
and access management system 10 has special connections to other application systems, col 8, 
lines 27-36). 

As to claims 3, 38, Gregg teaches the step of: 

receiving over said network a request to perform a database management operation from 
a user associated with particular second party of said plurality of second parties (i.e. For every 
user authentication request, the user authentication daemon first insures it is communicating 
with an authentic subscription access server 34, and then it queries the clearinghouse database 
server 56 to find the user's subscription information, col 6, line 64 to col 7, line 28)\ 

responding to said request by performing said database management operation on one or 
more databases controlled by said first party without human intervention by said first party (I e. 
For every user authentication request, the user authentication daemon first insures it is 
communicating with an authentic subscription access server 34, and then it queries the 
clearinghouse database server 56 to find the user's subscription information, col 6, line 64 to 
col 7, line 28). 

As to claims 5, 40, Gregg teaches the step of providing access over a network includes 
providing access over a public network of computer networks (i.e. It also includes a usage server 
which collects usage data from the subscription access servers 34 and updates the clearinghouse 
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database with it, and also includes a URL tracking server which collects URL tracking data from 
subscription access servers 34 to update the database. The clearinghouse also includes 
administration software 32 which provides a graphical user interface to administer the 
clearinghouse database, col. 4, lines 34-62). 

As to claims 6, 41, Gregg teaches the step of performing the database management 
operation involves allocating a different amount of resources to said particular second party than 
is currently allocated for said particular second party (i.e. multiple subscription access servers 
being controlled by a single clearinghouse 30 or multiple subscription access servers which 
interact with multiple clearinghouses 30. Such flexibility in configurations is an extremely 
desirable aspect of the present invention, col. 4, lines 6-33). 

As to claims 8, 43, Olden teaches the user interfaces contain controls for specifying user 
profile information, and selection of database services (i.e. As described earlier, resources are 
the component parts of each application. Referring to FIG. 16, clicking the Add button above the 
Resources window brings up the Create Resource dialog window. There are two ways to define a 
resource. One option is to enter a complete resource URI (/hr/benefits/copay/lookup. html, for 
example). The other is to use wildcards (/hr/benefits/copay/*.html or /hr /benefits/*). The 
resource must also be associated with a Web server 20 defined using the Web Servers page, col 
16, lines 51-59), 
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As to claims 10, 45, Gregg teaches the first party also provides database application over 
said network; and the method further comprises the step of delivering over the network, to a user 
associated with one of said second parties, one or more messages which cause generation of user 
interfaces that allow the users to access a database application service to which said one of said 
second parties has subscribed (i.e. For every user authentication request, the user authentication 
daemon first insures it is communicating with an authentic subscription access server 34, and 
then it queries the clearinghouse database server 56 to find the user f s subscription information, 
col. 6, line 64 to col 7, line 28). 

As to claims 11, 46, Gregg teaches the step of delivering over the network, to a user 
associated with one of said second parties, one or more messages which cause generation of user 
interfaces that allow the user to indicate changes to at least one of profile information, payment 
information, and the selection of services to which said one of said second parties is subscribed 
(i.e. It also includes a usage server which collects usage data from the subscription access 
servers 34 and updates the clearinghouse database with it, and also includes a URL tracking 
server which collects URL tracking data from subscription access servers 34 to update the 
database. The clearinghouse also includes administration software 32 which provides a 
graphical user interface to administer the clearinghouse database, col. 4, lines 34-62). 

As to claims 12, 47, Gregg teaches the step of delivering over the network, to a user 
associated with one of said second parties, one or more messages, which cause generation of user 
interfaces that allow the user to supply contents for a subscribed database (i.e. For every user 
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authentication request, the user authentication daemon first insures it is communicating with an 
authentic subscription access server 34, and then it queries the clearinghouse database server 56 
to find the user f s subscription information, col, 6, line 64 to col 7, line 28). . 

As to claims 13, 48, Gregg teaches the step of delivering over the network, to a user 
associated with one of said second parties, one or more messages (i.e. server application sends 
copyrighted contents to client application, Step 368, See Fig. 25) which cause generation of user 
interfaces that allow the user to develop a new database application (i.e. For every user 
authentication request, the user authentication daemon first insures it is communicating with an 
authentic subscription access server 34, and then it queries the clearinghouse database server 56 
to find the user's subscription information, col 6, line 64 to col 7, line 28). 

As to claims 14, 49, Olden teaches the step of delivering over the network, to a user 
associated with one of said second parties, one or more messages which cause generation of user 
interfaces that allow the user to integrate an external service (i.e. As described earlier, resources 
are the component parts of each application. Referring to FIG. 16, clicking the Add button above 
the Resources window brings up the Create Resource dialog window. There are two ways to 
define a resource. One option is to enter a complete resource URI 
(/hr/benefits/copay/lookup.html, for example). The other is to use wildcards 
(/hr/benefits/copay/*.html or /hr -/benefits/*). The resource must also be associated with a Web 
server 20 defined using the Web Servers page, col 16, lines 51-59). 
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As to claims 15, 50, Gregg teaches the step of delivering over the network, to a user 
associated with one of said second parties, one or more messages which cause generation of user 
interfaces that present a status of a user subscribed resources selected from database resources 
managed by said first party (I e. For every user authentication request, the user authentication 
daemon first insures it is communicating with an authentic subscription access server 34, and 
then it queries the clearinghouse database server 56 to find the user's subscription information, 
col. 6, line 64 to col 7, line 28). 

As to claims 16, 51, Olden teaches the step of delivering over the network, to a user 
associated with one of said second parties, one or more messages which cause generation of user 
interfaces that present the user with a user-selectable representation of a wizard for building a 
Web page with a database component associated with an interface to a database receiving user 
input indicating the wizard (i.e. In order to create a Web server, the Create button on the Web 
Servers page shown in FIG. 20 is clicked. This brings up the Create Web Server dialog window, 
as shown in FIG. 21. Various information is specified. The unique Web server Name is specified. 
This is the name that the security and access management system 10 uses when looking for the 
Web server over the computer network. The Hostname or host IP address of the Web server is 
also specified. The Port number on which the Web server runs is also specified. The 
Manufacturer of the Web server software is additionally specified. This is a drop down list. 
Finally, a short Description of the Web server is preferably specified, col. 19, lines 54-65); 

executing said wizard, including presenting a series of screens to the user to prompt user 
input for building the Web page (i.e. In order to create a Web server, the Create button on the 
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Web Servers page shown in FIG. 20 is clicked This brings up the Create Web Server dialog 
window, as shown in FIG. 21. Various information is specified. The unique Web server Name is 
specified. This is the name that the security and access management system 10 uses when looking 
for the Web server over the computer network. The Hostname or host IP address of the Web 
server is also specified. The Port number on which the Web server runs is also specified. The 
Manufacturer of the Web server software is additionally specified. This is a drop down list. 
Finally, a short Description of the Web server is preferably specified, col. 19, lines 54-65). 

As to claims 17, 52, Gregg teaches the step of the first party updating the one or more 
database systems by receiving from a community server over the network an update to the one or 
more database systems, wherein the community server provides the update to plurality of service 
providers over said network (i.e. It also includes a usage server which collects usage data from 
the subscription access servers 34 and updates the clearinghouse database with it, and also 
includes a URL tracking server which collects URL tracking data from subscription access 
servers 34 to update the database. The clearinghouse also includes administration software 32 
which provides a graphical user interface to administer the clearinghouse database, col 4, lines 
34-62). 

As to claims 18, 53, Gregg teaches the step of the first party sending to a community 
server a status of a user subscribed resource, wherein the user subscribed resources is maintained 
by said first party (i.e. It also includes a usage server which collects usage data from the 
subscription access servers 34 and updates the clearinghouse database with it, and also includes 
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a URL tracking server which collects URL tracking data from subscription access servers 34 to 
update the database. The clearinghouse also includes administration software 32 which provides 
a graphical user interface to administer the clearinghouse database, col. 4, lines 34-62). 

As to claims 19, 54, Gregg teaches presenting to a user associated with said first party a 
user interface to allow said first party to configure a database device used to provide said 
database services as one of a dedicated device and a plurality of virtual devices (i.e. The 
clearinghouse consists of a structured query language (SQL) database which hosts the 
clearinghouse database as well as a user authentication server which authenticates subscribers 
on behalf of the subscription access servers and processes online applications. It also includes a 
usage server which collects usage data from the subscription access servers 34 and updates the 
clearinghouse database with it, and also includes a URL tracking server which collects URL 
tracking data from subscription access servers 34 to update the database. The clearinghouse 
also includes administration software 32 which provides a graphical user interface to administer 
the clearinghouse database, col. 4, lines 34-62). 

As to claims 20, 55, Gregg teaches presenting to a user associated with said first party a 
user interface to allow said first party to configure at least one of a dedicated device, and a 
virtual device of plurality of virtual devices as one of a staging device available only to a 
database service developer for developing database services, and a production device for making 
services available to a user who is not the database service developer (i.e. The clearinghouse 
consists of a structured query language (SQL) database which hosts the clearinghouse database 



Application/Control Number: 09/872,235 Page 19 

Art Unit: 2167 

as well as a user authentication server which authenticates subscribers on behalf of the 
subscription access servers and processes online applications. It also includes a usage server 
which collects usage data from the subscription access servers 34 and updates the clearinghouse 
database with it, and also includes a URL tracking server which collects URL tracking data from 
subscription access servers 34 to update the database. The clearinghouse also includes 
administration software 32 which provides a graphical user interface to administer the 
clearinghouse database, col. 4, lines 34-62). 

As to claims 21, 56, Gregg teaches presenting a user interface for transferring an 
application from a staging device to a production device (i.e. The clearinghouse consists of a 
structured query language (SQL) database which hosts the clearinghouse database as well as a 
user authentication server which authenticates subscribers on behalf of the subscription access 
servers and processes online applications. It also includes a usage server which collects usage 
data from the subscription access servers 34 and updates the clearinghouse database with it, and 
also includes a URL tracking server which collects URL tracking data from subscription access 
servers 34 to update the database. The clearinghouse also includes administration software 32 
which provides a graphical user interface to administer the clearinghouse database, col. 4, lines 
34-62). 

As to claims 22, 57, Gregg teaches the step of delivering to a party over the network one 
or more messages which cause generation of user interfaces that allow the party to subscribe to 
said database services is performed as part of a registration process (i.e. For every user 
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authentication request, the user authentication daemon first insures it is communicating with an 
authentic subscription access server 34, and then it queries the clearinghouse database server 56 
to find the user's subscription information, col 6, line 64 to col 7, line 28). 

As to claims 25, 60, Olden teaches the steps of: 

presenting to the user a set of selectable sources of content (i.e. As described earlier, 
resources are the component parts of each application. Referring to FIG. 16, clicking the Add 
button above the Resources window brings up the Create Resource dialog window. There are 
two ways to define a resource. One option is to enter a complete resource URI 
(/hr /benefits/ copay /lookup. html, for example). The other is to use wildcards 
(/hr /benefits/ copay/*. html or /hr /benefits/*). The resource must also be associated with a Web 
server 20 defined using the Web Servers page, col. 16, lines 51-59); 

receiving user input indicating a selected source (i.e. As described earlier, resources are 
the component parts of each application. Referring to FIG. 16, clicking the Add button above the 
Resources window brings up the Create Resource dialog window. There are two ways to define a 
resource. One option is to enter a complete resource URI (/hr/benefits/copay/lookup.html, for 
example). The other is to use wildcards (/hr/benefits/copay/*html or /hr /benefits/*). The 
resource must also be associated with a Web server 20 defined using the Web Servers page, col 
16, lines 51-59); and 

launching a source update process to connect to the selected source and update a database 
with information received from the selected sources (i.e. As described earlier, resources are the 
component parts of each application. Referring to FIG 16, clicking the Add button above the 
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Resources window brings up the Create Resource dialog window. There are two ways to define a 
resource. One option is to enter a complete resource URI (/hr/benefits/copay/lookup. html, for 
example). The other is to use wildcards (/hr/benefits/copay/*.html or /hr -/benefits/*). The 
resource must also be associated with a Web server 20 defined using the Web Servers page, col. 
16, lines 51-59). 

As to claims 26, 61, Olden teaches: 

the user input indicating a selected source also indicates a schedule for updating from the 
selected source (i.e. Clicking the Set button for either of these properties brings up a date set 
window, as shown in FIGS. 10 and 11 for the Account Start and Account Expiry dates, 
respectively. Using these windows, the Account Start Date and Account Expiry Date can be set 
by selecting the desired date and time and clicking the Select or OK button. In order to 
automatically enter the current time and date, the Now button and the Select or OK button are 
clicked in sequence. The times set using these windows refer to the time zone of the host 
machine, col 13, lines 60-65); 

the source update process connects to the selected source according to the schedule for 
updating from the selected source (i.e. Clicking the Set button for either of these properties 
brings up a date set window, as shown in FIGS. 10 and 11 for the Account Start and Account 
Expiry dates, respectively. Using these windows, the Account Start Date and Account Expiry 
Date can be set by selecting the desired date and time and clicking the Select or OK button. In 
order to automatically enter the current time and date, the Now button and the Select or OK 
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button are clicked in sequence. The times set using these windows refer to the time zone of the 
host machine, col 13, lines 60-65). 

As to claims 27, 62, Gregg teaches the steps of: 

in response to user input that specifies that data should be loaded into a subscribed 
database, determining whether the subscribed database currently exists for said one of said 
second parties (i.e. The subscriber preferably also includes an access key for providing two 
factor authentication. The access key comprises a hardware component containing an ASIC as 
having the structure illustrated in FIG. 28 and contains a unique digital identification that is 
microcoded into it, col. 5, lines 32-54); 

creating the subscribed database if the subscribed database does not currently exist for 
said one of said second parties (i.e. The clearinghouse consists of a structured query language 
(SQL) database which hosts the clearinghouse database as well as a user authentication server 
which authenticates subscribers on behalf of the subscription access servers and processes 
online applications. It also includes a usage server which collects usage data from the 
subscription access servers 34 and updates the clearinghouse database with it, and also includes 
a URL tracking server which collects URL tracking data from subscription access servers 34 to 
update the database. The clearinghouse also includes administration software 32 which provides 
a graphical user interface to administer the clearinghouse database, col. 4, lines 34-62). 



As to claims 28, 63, Olden teaches the step of: 
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presenting representations of selectable application development kits (i.e. Referring to 
FIG. 16, in order to create a new application, the Create button is clicked. This brings up the 
Create Application dialog window, col 8, lines 27-36; In order to create a Web server, the 
Create button on the Web Servers page shown in FIG. 20 is clicked. This brings up the Create 
Web Server dialog window, as shown in FIG. 21, col. 19, lines 54-65); 

receiving user input indicating a selected development kit from the user (i.e. The 
administrator can then specify the following application properties. One application property is 
the Name of the application. Another property is a short Description of the Web application. A 
final property is a Type for the application, which is generally set to WEB, unless the installation 
of the security and access management system 10 has special connections to other application 
systems, col 8, lines 27-36); 

launching a staging process including: 

configuring consumable database resources on a staging database device, wherein a 
staging database device can be accessed by the user for developing the new database application 
and cannot be accessed by users associated with other parties of said plurality of second parties 
(i.e. The security and access management system 10 allows a security administrator to create an 
unlimited number of users, each with individual defining properties. The administrator can 
further collect users into groups and groups into realms. Additionally, users can be in multiple 
groups. This feature is useful for administrators trying to mimic organizational structure (for 
example, user John Doe may be in the promotions group, which is in the marketing realm) or 
geography (user Jane Doe is in the Paris group, which is in the Europe realm), or any other type 
of grouping. The user/group/realm concept is also important for setting permissions and 
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entitlements, as will be described later in connection with the description of the Basic 
Entitlements page, col 13, lines 23-36)\ 

receiving development input from the user (i.e. The administrator can then specify the 
following application properties. One application property is the Name of the application. 
Another property is a short Description of the Web application. A final property is a Type for the 
application, which is generally set to WEB, unless the installation of the security and access 
management system 10 has special connections to other application systems, col 8, lines 27-36); 

building a new application on the staging database device based on the selected 
development kit and the development input (i.e. Referring to FIG. 16, in order to create a new 
application, the Create button is clicked. This brings up the Create Application dialog window. 
The administrator can then specify the following application properties. One application 
property is the Name of the application. Another property is a short Description of the Web 
application. A final property is a Type for the application, which is generally set to WEB, unless 
the installation of the security and access management system 10 has special connections to 
other application systems, col 8, lines 27-36). 

As to claims 29, 64, Olden teaches the step of developing the new database application 
further comprising the steps of 

after receiving user input indicating a selected development kit, determining whether a 
client process of the selected development kit must be downloaded to a computer of the user over 
the wide area network (i.e. The user can be allowed to download appropriate applets based on 
permissions managed by the security and access management system 10. Application 
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entitlements dictate the level of control that the administrator has over application access. 
Applications with only the access entitlement are completely available to anyone with that 
entitlement. Applications with entitlements for each of their various functions allow finer-grained 
control col 8, lines 8-26); 

if it is determined the client process of the selected development kit must be downloaded, 
downloading the client process to the computer of the user over the wide area network before the 
step of building the new application (i.e. The user can be allowed to download appropriate 
applets based on permissions managed by the security and access management system 10. 
Application entitlements dictate the level of control that the administrator has over application 
access. Applications with only the access entitlement are completely available to anyone with 
that entitlement. Applications with entitlements for each of their various functions allow finer- 
grained control col 8 t lines 8-26), 

As to claims 30, 65, Olden teaches the step of developing a new database application 
further comprising the steps of: 

receiving input from the user indicating the new application is ready for operational use 
(i.e. Referring to FIG. 16, in order to create a new application, the Create button is clicked. This 
brings up the Create Application dialog window. The administrator can then specify the 
following application properties. One application property is the Name of the application. 
Another property is a short Description of the Web application. A final property is a Type for the 
application, which is generally set to WEB, unless the installation of the security and access 
management system 10 has special connections to other application systems, col 8 } lines 27-36). 
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in response to receiving input from the user indicating the new application is ready for 
operational use, launching a production transfer process including sending a request to the first 
party to transfer the new application to a production device on which the new application may be 
accessed by users who did not develop the new application (i.e. Referring to FIG 16, in order to 
create a new application, the Create button is clicked. This brings up the Create Application 
dialog window. The administrator can then specify the following application properties. One 
application property is the Name of the application. Another property is a short Description of 
the Web application. A final property is a Type for the application, which is generally set to 
WEB, unless the installation of the security and access management system 10 has special 
connections to other application systems, col. 8, lines 27-36). 

As to claims 31, 66, Olden teaches integrating comprises the steps of: 
presenting a representation of a selectable external service (i.e. Thus, he or she would 
select the marketing department administrator role. As the window indicates, the corresponding 
Administrative Group is the n Marketing Department. " Administrative roles and groups will be 
described in more detail later in connection with the description of the Administrators page. 
Once the administrator has selected an administrative role by highlighting that role, clicking the 
Select Role button opens the main window, col. 12, lines 46-59)\ 

receiving user input indicating a selected external service (i.e. Thus, he or she would 
select the marketing department administrator role. As the window indicates, the corresponding 
Administrative Group is the n Marketing Department. " Administrative roles and groups will be 
described in more detail later in connection with the description of the Administrators page. 
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Once the administrator has selected an administrative role by highlighting that role, clicking the 
Select Role button opens the main window, col 12, lines 46-59); 

launching an integration process to provide the external service to the user (i.e. Thus, he 
or she would select the marketing department administrator role. As the window indicates, the 
corresponding Administrative Group is the "Marketing Department. ff Administrative roles and 
groups will be described in more detail later in connection with the description of the 
Administrators page. Once the administrator has selected an administrative role by highlighting 
that role, clicking the Select Role button opens the main window, col. 12, lines 46-59). 

As to claims 32, 67, Olden teaches the selectable external service includes at least one of 
a payment service, a mobile Internet portal, an enterprise resource planning application, and a 
customer relationship management application (i.e. Thus, he or she would select the marketing 
department administrator role. As the window indicates, the corresponding Administrative 
Group is the "Marketing Department. " Administrative roles and groups will be described in 
more detail later in connection with the description of the Administrators page. Once the 
administrator has selected an administrative role by highlighting that role, clicking the Select 
Role button opens the main window, col 12, lines 46-59). 

As to claims 33, 68, Gregg teaches the first party performing at least one of the steps of: 
setting up database parameters; reporting database usage; backing up the database, upgrading the 
database, controlling database versions, implementing database security; implementing database 
security within the database (i.e. The server 34 also includes a site administration software 
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program that provides a web based visual interface to administer the session manager and 
maintain subscription profiles, col 5, lines 7-31). 

As per claim 73, Olden teaches one of the plurality of intermediate providers is an 
Application Service Provider (ASP) (Le. Referring to FIG. 16, in order to create a new 
application, the Create button is clicked. This brings up the Create Application dialog window. 
The administrator can then specify the following application properties. One application 
property is the Name of the application. Another property is a short Description of the Web 
application. A final property is a Type for the application, which is generally set to WEB, unless 
the installation of the security and access management system 10 has special connections to 
other application systems, col. 8, lines 27-36). 

6. Claims 23, 24, 34, 35, 58, 59, 69, 70 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Gregg et al. (US Patent No. 6,5 16,416), in view of Olden (US Patent No. 
6,460,141), and further in view of Ciarlante et al. (US Patent No. 6,532,488). 

As to claims 23, 58, Gregg, Olden do not specifically teach the steps of receiving a user 
input value for a particular threshold percentage; 

presenting an alert if an amount of resources consumed by said party exceeds the 
particular threshold percentage of the maximum amount of subscribed resources 

Ciarlante teaches the steps of receiving a user input value for a particular threshold 
percentage (i.e. The user may be allowed to access the specific application once, a specific, 
predetermined number of times, an application-specific number of times, or an unlimited number 
of times during that month, col. 12, lines 36-61); 
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presenting an alert if an amount of resources consumed by said party exceeds the 
particular threshold percentage of the maximum amount of subscribed resources (i.e. a count 
may be kept of the number of times the user has accessed the instance during the month until that 
number reaches a threshold, at which point a UIM is deducted. If the EKey contains additional 
UIMs, step 212, the hosting system continues to allow users to host applications. Otherwise, the 
ISP must purchase another EKey, step 202, col. 12, line 62 to col 13, line 9). 

It would have been obvious to one of ordinary skill of the art having the teaching of 
Gregg, Olden and Ciarlante at the time the invention was made to modify the system of Gregg, 
Olden to include the limitations as taught by Ciarlante. One of ordinary skill in the art would be 
motivated to make this combination in order to register and establish an account to pay for use of 
the hosted application in view of Ciarlante (col, 3, line 65 to col. 4, line 14), as doing so would 
give the added benefit of a system to allow service providers the flexibility to offer user initiated 
groupware applications on a variety of different financial and legal terms as taught by Ciarlante 
(col. 2 5 lines 10-14). 

As to claims 24, 59, Gregg, Olden do not teach the maximum amount of subscribed 
resources includes a maximum amount of at least one of an amount of storage space, a number of 
users connected to a platform in a period of time, an amount of processor time used in a period of 
time, and a number of transactions completed in a period of time. 

Ciarlante teaches the maximum amount of subscribed resources includes a maximum 
amount of at least one of an amount of storage space, a number of users connected to a platform 
in a period of time, an amount of processor time used in a period of time, and a number of 
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transactions completed in a period of time (i.e. The user may be allowed to access the specific 
application once, a specific, predetermined number of times, an application-specific number of 
times, or an unlimited number of times during that month, col 12, lines 36-61). 

It would have been obvious to one of ordinary skill of the art having the teaching of 
Gregg, Olden and Ciarlante at the time the invention was made to modify the system of Gregg, 
Olden to include the limitations as taught by Ciarlante. One of ordinary skill in the art would be 
motivated to make this combination in order to register and establish an account to pay for use of 
the hosted application in view of Ciarlante (col. 3, line 65 to col. 4, line 14), as doing so would 
give the added benefit of a system to allow service providers the flexibility to offer user initiated 
groupware applications on a variety of different financial and legal terms as taught by Ciarlante 
(col. 2, lines 10-14). 

As to claims 34, 69, Gregg, Olden do not explicitly teach the step of: 

if a costing database does not already exist, then automatically creating the costing 

database of database resource usage by user, and initiating a costing model with price per unit of 

consumable resource per service; 

inserting data into the costing database based- on actual use of database resources by the 

user; 

executing the costing model to compute a cost-per-user based on the data in the costing 
database and the price per unit of consumable resource per service; 
billing the user for the cost computed by the costing model. 
Ciarlante teaches: 
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if a costing database does not already exist, then automatically creating the costing 
database of database resource usage by user, and initiating a costing model with price per unit of 
consumable resource per service (i.e. At the start of every month, the hosting system vendor 
generates electronic keys, step 200, which are specially encoded and encrypted files that are 
deliverable to ISPs by download over the Internet. The electronic keys or EKeys are supplied in 
prepackaged quantities of User Instance Months or UIMscol 12, lines 36-61); 

inserting data into the costing database based on actual use of database resources by the 
user (i.e. At the start of every month, the hosting system vendor generates electronic keys, step 
200, which are specially encoded and encrypted files that are deliverable to ISPs by download 
over the Internet. The electronic keys or EKeys are supplied in prepackaged quantities of User 
Instance Months or UIMscol 12, lines 36-61); 

executing the costing model to compute a cost-per-user based on the data in the costing 
database and the price per unit of consumable resource per service (i.e. The electronic keys or 
EKeys are supplied in prepackaged quantities of User Instance Months or UIMs, with volume 
discounts being offered. For example, a starter Ekey may contain 375 UIMs and be priced at 
$500, a small Ekey may contain 3, 000 UIMs and cost $3, 000, and a large EKey may contain 
30,000 UIMs and cost $25,000. Each UIM allows one user to host one application instance 
during that month, col 12, lines 36-61); 

billing the user for the cost computed by the costing model (i.e. During use of the 
application instance, the host system tracks use of the application for billing and accounting 
purposes, col 10, lines 25-26). 
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It would have been obvious to one of ordinary skill of the art having the teaching of 
Gregg, Olden and Ciarlante at the time the invention was made to modify the system of Gregg, 
Olden to include the limitations as taught by Ciarlante. One of ordinary skill in the art would be 
motivated to make this combination in order to register and establish an account to pay for use of 
the hosted application in view of Ciarlante (col. 3, line 65 to col. 4, line 14), as doing so would 
give the added benefit of a system to allow service providers the flexibility to offer user initiated 
groupware applications on a variety of different financial and legal terms as taught by Ciarlante 
(col. 2, lines 10-14). 

As to claims 35, 70, Ciarlante teaches the costing model supports: (col 12, lines 36-61) 

fixed price per unit of usage (i.e. rate for ... megabytes transferred/month); 

variable price per unit usage as a function of usage (i.e. a rate for disk space 
usage/month); 

flat price up to maximum value of usage (i.e. flat rate); 

different prices for different users (i.e. a rate per user/per month); 

different prices for different services (i.e. rate for ... page hits/month); 

different prices for increments of usage above a maximum subscribed usage (i.e. ISVs 
also pay the hosting system platform vendor in accordance with a formula based on use of the 
hosting system). 

7. Claim 72 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gregg et al. (US 
Patent No. 6,516,416), in view of Olden (US Patent No. 6,460,141), and further in view of Gillett 
et al. (US Patent No. 6,760,71 1). 
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As per claim 72, Gregg, Olden do not teach one of the plurality of intermediate providers 
is in Internet Service Provider (ISP). 

Gillett teaches this limitation (i.e. An online commerce architecture enables merchants to 
setup online stores that are hosted by third party Internet service providers (ISPs), Abstract), 

It would have been obvious to one of ordinary skill of the art having the teaching of 
Gregg, Olden, Gillett at the time the invention was made to modify the system of Gregg, Olden 
to include the limitations as taught by Gillett. One of ordinary skill in the art would be motivated 
to make this combination in order to setup online stores that are hosted by third party Internet 
service providers (ISPs) in view of Gillett (Summary), as doing so would give the added benefit 
of storing that are owned by merchants, but hosted by remote independent service providers 
(ISPs), and to secure protection of merchant owned data resident on servers located at the ISP's 
site as taught by Gillett (col. 1, lines 5-14). 

Response to Arguments 

8. Applicant's arguments regarding claims 1 and 36 have been amended to "recite more 
detailed features that are not shown in any combination of prior art", have been considered but 
are moot in view of the new ground(s) of rejection. 

Conclusion 

9. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 
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